> I'm not sure that this is authoritative. The Java API documentation > says that it "aims" to provide "Full support for the .xz file format > specification version 1.0.4"
I am not certain which statement you believe is not authoritative. There are existing constructors (such as[1]) which allow the disabling of checksum verification. [1] - https://tukaani.org/xz/xz-javadoc/org/tukaani/xz/XZInputStream.html#%3Cinit%3E(java.io.InputStream,int,boolean)
